Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37342e3230382e302f32302d3234203d3e203238333433.roa
File:                     3137372e37342e3230382e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          U3QzG8kPLoxiqhtHZuKVNZUBJUjatFOcy3ATYQ+sKCs=
Subject key identifier:   04:62:B5:B1:65:60:18:50:76:D8:1F:9B:E2:98:F8:F8:94:77:D1:BC
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       2C18FD629C0D07CED49AB99900FFE95061083AC7
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37342e3230382e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        177.74.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:18:fd:62:9c:0d:07:ce:d4:9a:b9:99:00:ff:e9:50:61:08:3a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:8b:23:66:84:14:79:7e:91:f7:e0:a9:df:
                    a6:50:62:52:ad:c4:73:1b:c8:e7:f9:ec:ce:c3:25:
                    b8:8e:ff:8c:e9:d0:f9:6d:ae:f9:34:21:1b:bb:5c:
                    51:be:a4:8d:99:fc:ce:33:d4:8c:60:68:30:62:5b:
                    93:36:75:4e:aa:46:bc:92:a9:53:0b:2c:2b:8c:3e:
                    4b:d0:a8:c3:ae:e2:72:5f:25:8a:07:21:33:13:b6:
                    06:6b:44:3c:25:bc:0a:6b:fa:31:d6:5f:ac:8c:74:
                    ca:d6:c2:7e:e8:e7:e0:14:0d:3f:e2:22:2a:11:cd:
                    5b:d6:16:3e:f5:cb:c6:0d:8b:08:e3:3f:99:70:76:
                    2c:d6:f1:92:6c:04:18:4b:8c:f2:65:46:e8:5b:2e:
                    ae:a3:6b:06:cb:06:dc:84:c9:0d:c7:5a:87:e9:3b:
                    64:09:38:4a:ae:08:25:b7:c4:31:dd:aa:39:99:27:
                    94:94:d0:f9:b5:43:1e:9f:5b:ec:79:63:7b:06:b6:
                    10:96:0e:e7:87:84:ea:ed:5c:fc:12:e8:8b:2e:81:
                    d1:75:48:13:52:9a:e3:ae:d4:17:3c:62:bc:b9:8d:
                    e6:1f:40:4a:51:15:3c:88:34:77:b0:cb:36:8c:ed:
                    d3:5f:78:28:1b:c7:2a:46:65:0f:74:8e:55:e8:82:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:62:B5:B1:65:60:18:50:76:D8:1F:9B:E2:98:F8:F8:94:77:D1:BC
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3137372e37342e3230382e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:e7:21:e8:e1:51:a1:c8:03:fc:4a:16:2d:51:9a:de:d2:03:
         e1:35:59:d2:bf:08:71:37:a8:dc:7d:93:59:3f:0f:be:b5:f0:
         59:ec:d2:c0:37:5c:9a:85:e6:c7:0c:ab:a8:2b:c1:c4:fe:39:
         a6:a5:0b:94:a4:9a:2c:eb:de:de:fa:96:dd:8e:dd:d3:46:1c:
         3c:2a:e6:a8:d3:d6:f2:7a:64:74:11:9f:c5:fc:fd:2d:a5:de:
         ad:5a:82:09:54:df:41:c1:71:72:a6:43:c9:68:37:83:12:b3:
         31:56:ea:2d:3e:b5:bc:45:ff:80:f9:c9:8e:31:ea:7d:7a:5c:
         da:70:fc:39:65:8f:1b:85:0c:d8:d7:c8:84:13:88:da:62:c3:
         25:50:52:e9:71:aa:a1:fe:38:c6:b7:ab:10:14:27:7c:d9:dc:
         16:0b:55:6b:5a:aa:12:04:cf:bb:b0:12:ae:b2:2d:c6:cb:ee:
         a0:95:cc:64:88:6a:e9:3a:cb:81:fc:33:b0:f6:d9:0c:c2:c3:
         cd:a5:ab:af:39:be:a1:7f:6a:9f:ce:f9:d1:7c:b4:4c:33:a3:
         4e:f5:05:76:61:51:23:d0:16:a4:ac:07:e5:f6:5a:d5:65:29:
         dd:7b:a2:38:12:39:81:9b:bd:e8:f3:12:aa:d4:04:59:28:21:
         41:e3:e5:2d
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULBj9YpwNB87UmrmZAP/pUGEIOscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MTlaFw0yMzA0MjcxMzI5MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTkwOThCMjM2Njg0MTQ3OTdF
OTFGN0UwQTlERkE2NTA2MjUyQURDNDczMUJDOEU3RjlFQ0NFQzMyNUI4OEVGRjhD
RTlEMEY5NkRBRUY5MzQyMTFCQkI1QzUxQkVBNDhEOTlGQ0NFMzNENDhDNjA2ODMw
NjI1QjkzMzY3NTRFQUE0NkJDOTJBOTUzMEIyQzJCOEMzRTRCRDBBOEMzQUVFMjcy
NUYyNThBMDcyMTMzMTNCNjA2NkI0NDNDMjVCQzBBNkJGQTMxRDY1RkFDOEM3NENB
RDZDMjdFRThFN0UwMTQwRDNGRTIyMjJBMTFDRDVCRDYxNjNFRjVDQkM2MEQ4QjA4
RTMzRjk5NzA3NjJDRDZGMTkyNkMwNDE4NEI4Q0YyNjU0NkU4NUIyRUFFQTM2QjA2
Q0IwNkRDODRDOTBEQzc1QTg3RTkzQjY0MDkzODRBQUUwODI1QjdDNDMxRERBQTM5
OTkyNzk0OTREMEY5QjU0MzFFOUY1QkVDNzk2MzdCMDZCNjEwOTYwRUU3ODc4NEVB
RUQ1Q0ZDMTJFODhCMkU4MUQxNzU0ODEzNTI5QUUzQUVENDE3M0M2MkJDQjk4REU2
MUY0MDRBNTExNTNDODgzNDc3QjBDQjM2OENFREQzNUY3ODI4MUJDNzJBNDY2NTBG
NzQ4RTU1RTg4MjAxRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqQmLI2aEFHl+kffgqd+mUGJSrcRzG8jn+ezOwyW4jv+M6dD5ba75
NCEbu1xRvqSNmfzOM9SMYGgwYluTNnVOqka8kqlTCywrjD5L0KjDruJyXyWKByEz
E7YGa0Q8JbwKa/ox1l+sjHTK1sJ+6OfgFA0/4iIqEc1b1hY+9cvGDYsI4z+ZcHYs
1vGSbAQYS4zyZUboWy6uo2sGywbchMkNx1qH6TtkCThKrgglt8Qx3ao5mSeUlND5
tUMen1vseWN7BrYQlg7nh4Tq7Vz8EuiLLoHRdUgTUprjrtQXPGK8uY3mH0BKURU8
iDR3sMs2jO3TX3goG8cqRmUPdI5V6IIB0QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FARitbFlYBhQdtgfm+KY+PiUd9G8MB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMxMzczNzJlMzczNDJlMzIzMDM4
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLFK
0DANBgkqhkiG9w0BAQsFAAOCAQEAZuch6OFRocgD/EoWLVGa3tID4TVZ0r8IcTeo
3H2TWT8PvrXwWezSwDdcmoXmxwyrqCvBxP45pqULlKSaLOve3vqW3Y7d00YcPCrm
qNPW8npkdBGfxfz9LaXerVqCCVTfQcFxcqZDyWg3gxKzMVbqLT61vEX/gPnJjjHq
fXpc2nD8OWWPG4UM2NfIhBOI2mLDJVBS6XGqof44xrerEBQnfNncFgtVa1qqEgTP
u7ASrrItxsvuoJXMZIhq6TrLgfwzsPbZDMLDzaWrrzm+oX9qn8750Xy0TDOjTvUF
dmFRI9AWpKwH5fZa1WUp3XuiOBI5gZu96PMSqtQEWSghQePlLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org